The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

CVEsMetasploit Modules
Emergent Threat6

TitleEitWModules
CVE-2026-91477: Insecure Storage of Sensitive Information3.1 LowN/A0%Oct 20, 2026
CVE-2026-91476: Missing Authentication for Critical Function5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91475: Improper Access Control6.6 MediumN/A0%Oct 20, 2026
CVE-2026-91474: Improper Access Control6.1 MediumN/A0%Oct 20, 2026
CVE-2026-91473: Improper Privilege Management7.8 HighN/A0%Oct 20, 2026
CVE-2026-91471: Improper Access Control3.7 LowN/A0%Oct 20, 2026
CVE-2026-91468: Improper Access Control6.5 MediumN/A0%Oct 20, 2026
CVE-2026-91467: Improper Authentication6.6 MediumN/A0%Oct 20, 2026
CVE-2026-91466: Improper Access Control6.4 MediumN/A0%Oct 20, 2026
CVE-2026-91465: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
CVE-2026-91464: Use After Free5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91463: Use After Free5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91462: Improper Access Control5.9 MediumN/A0%Oct 20, 2026
CVE-2026-91461: Improper Certificate Validation3.7 LowN/A0%Oct 20, 2026
CVE-2026-91460: Deserialization of Untrusted Data7.8 HighN/A0%Oct 20, 2026
CVE-2026-91459: Deserialization of Untrusted Data7.8 HighN/A0%Oct 20, 2026
CVE-2026-91458: Improper Input Validation7.8 HighN/A0%Oct 20, 2026
CVE-2026-91457: Improper Input Validation7.8 HighN/A0%Oct 20, 2026
CVE-2026-91455: URL Redirection to Untrusted Site5.4 MediumN/A0%Oct 20, 2026
CVE-2026-91453: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91452: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91451: Improper Access Control5.3 MediumN/A0%Oct 20, 2026
CVE-2026-91450: Missing Authentication for Critical Function7.4 HighN/A0%Oct 20, 2026
CVE-2026-91449: Missing Authentication for Critical Function7.4 HighN/A0%Oct 20, 2026
CVE-2026-91448: Exposure of Sensitive Information to an Unauthorized Actor7.5 HighN/A0%Oct 20, 2026
151-175 of 13406
‹›